חברות הייטק בישראל ‹ OP Innovate ‹ Offensive Security Team Lead
כישורים מהמשרה
Offensive security leadershipEnd-to-end penetration testingSecurity vulnerability researchApplication security (web, mobile, API)Exploit development and validationSecure SDLC with shift-left practicesSAST/SCA implementation (e.g., Semgrep, SonarQube)Source code security analysis (Python/Go/Java/Node.js)Cloud-native pentesting and auditing (AWS/Azure/GCP)Client-facing findings communication
תיאור המשרה
Careers - OP INNOVATE
Skip to main content
Skip to footer
Sign Up
WASP Platform
WASP PTaaS Attack Surface Management (ASM)
Continuous Threat Exposure Management (CTEM) Vulnerability Disclosure Program (VDP)
Solution
Incident Response
Incident Response
Incident Response Retainer
Application Security
Cloud Application Security Mobile Application Penetration Testing
Secure Code Review Web Application Penetration Testing
Organization Security
Red Teaming
CISO as a Service
Resources
Blog CTI
Release Notes
Reports
Unpacking Handala
The State of Penetration Testing 2024
Security & Compliance
Certifications
SOC2 Compliance
Company
About Us Careers
Partners
Sign Up
Join our team of world-class cybersecurity experts
If you’re a team player with passion for staying one step ahead of everyone else, see if there are any openings that could be of interest to you.
Open Positions
Why Join The Team?
OP Innovate is at the forefront of penetration testing and incident response in the world, helping keep our customers safe for cyber attacks and stepping in and helping companies in need of dire assistance. Our team is made up of highly intelligent and dedicated team members that work together towards one goal.
Careers
← All Jobs
Offensive Security Team Lead
Rishon LeZion
· Full-time
· Management
About The Position
We are a cutting-edge cybersecurity company that combines powerful scanning technologies with expert services. At OP Innovate, security research isn’t a support function - it’s at the core of how we build, think, and deliver value to help businesses stay secure through modern, practical, and innovative solutions. This role sits right at that intersection of advanced hands-on research, combined with ownership over how our work shows up in the real world.
We’re looking for a hands-on Offensive Security Team Lead who wants to stay close to the technical edge while shaping how a team operates and grows. Someone who enjoys getting their hands dirty with the details of complex vulnerabilities and threats, but also cares about raising the bar across projects, people, and outcomes.
You’ll lead meaningful, end-to-end work across penetration testing, application security and vulnerability research, while guiding a team of talented security researchers. This is a role with real influence on the quality of our research, the way we work, and the impact we deliver to our clients.
Requirements
• Lead and drive end-to-end security research projects across web applications, API, mobile (iOS/Android), and cloud environments (AWS, Azure, GCP) - from initial scoping through research, exploitation and final delivery
• Stay hands-on in the research itself, digging into complex vulnerabilities, validating findings, and setting the technical direction across engagements
• Translate technical findings into clear, actionable insights, helping clients understand risk, impact, and next steps without losing the technical depth
• Own multiple concurrent projects, maintaining clear visibility over progress, coverage, and research depth while ensuring consistently high-quality outcomes
• Define and drive the strategic implementation of Application Security within the SDLC, orchestrating a seamless blend of manual research, deep-dive code reviews, and automated SAST/SCA guardrails to ensure security at scale
• Set the standard for research quality by reviewing the work, challenging assumptions, and ensuring every deliverable reflects both clarity and impact
• Lead and mentor a team of experienced researchers, providing hands-on guidance, reviews, and support while helping them grow in both technical and professional dimensions
• Contribute to how we work as a group - refining methodologies, improving testing playbooks, and building scalable research workflows and tooling
• Stay ahead of the curve by keeping close to emerging vulnerabilities, exploitation techniques, and trends across the offensive security landscape
Skills and Experience
• 5+ years of hands-on experience in security research from either a product or services cybersecurity company
• 2+ years of experience leading a small team, with a clear focus on technical leadership and day-to-day mentorship
• Proven experience driving projects from scoping to final delivery with a strong sense of ownership
• Experience in Application Security (Web and Mobile), Pentesting, and Vulnerability Research, including strong familiarity with common attack vectors and exploitation techniques
• Experience working within secure SDLC practices, including "shift left" approaches and SAST and SCA tools (Semgrep, SonarQube, etc.)
• Confidence working directly with clients - presenting findings, leading discussions, and representing the team’s work clearly
• Strong communication skills in both Hebrew and English, written and verbal
• A proactive, accountable approach with strong organization and a collaborative mindset
• Strong source code analysis skills across common backend and scripting languages (e.g., Python, Go, Java, Node.js) with the ability to identify security vulnerabilities and logic flaws
• Experience in cloud-native pentesting and automated auditing within AWS, Azure, or GCP, with a focus on identifying misconfigurations and lateral movement risks.
• B.Sc. in Computer Science or equivalent hands-on experience (military background or advanced certifications such as OSCP, OSWE, etc. are a strong advantage)
Advantages
• Broader experience across additional research domains such as cloud security, red teaming, infrastructure testing, or incident response
• Hands-on experience with industry-standard tools such as Prowler and Scout Suite
• Experience building internal tools, scripts, or automation to support research workflows
• Track record of vulnerability discovery and disclosure (e.g., CVEs, bug bounty)
• Contributions to the security community - conference talks or blog posts
• Familiarity with DFIR practices
Apply for this position
If you have any questions contact our OP Innovate Team!
Full Name*
Email*
Your Question*
•
I have read and understood the Privacy Policy
Submit
Under Cyber Attack?
Fill out the form and we will contact you immediately.
על OP Innovate
Established in 2014 to defend global enterprises from the increasing challenges of organizational cybersecurity. Our experience in the field is extensive with unmatched expertise in cyber research, penetration testing, incident response, training and forensics. 🦾 With headquarters in Israel, we rub shoulders with the best-of-breed in the field of cybersecurity, exposed to cutting-edge responses to today’s most critical cybersecurity concerns. This knowledge allows us and our customers to remain ahead of the curve. 🚀